474 Commits

Author SHA1 Message Date
APriestman
a0349b3fb7 Removed reference to TSK_PROCESSOR_NAME from RecentActivity. 2015-01-29 08:40:10 -05:00
APriestman
f379f83e15 Reverted two reg ripper plugins that we had previously modified to not print a bunch of error information when the keys weren't found. 2015-01-26 09:51:42 -05:00
APriestman
8ac91c2cb8 Combine OS attributes found in the registry. 2015-01-23 13:30:27 -05:00
APriestman
93eb80364a Reducing the number of duplicate account names reported by ExtractIE in RecentActivity. 2014-12-03 14:57:06 -05:00
APriestman
fe62624541 Updated RecentActivity to use RegRipper 2.8.
Added additional RegRipper modules to support STIX data.
Stopped RecentActivity IE parser from generating empty user accounts.
2014-12-03 14:21:14 -05:00
APriestman
0fe22cc94c Added regripper modules needed for STIX 2014-11-24 14:26:35 -05:00
Richard Cordovano
d69c03d4da Merge pull request #962 from karlmortensen/report_generator
Report generator
2014-11-20 18:36:40 -05:00
Brian Carrier
1cfbda53d7 Changed Regripper to make an Autopsy report instead of TOOL_OUTPUT to make it easier to use 2014-11-18 14:39:36 -05:00
Karl Mortensen
d7deec052d remove duplicate domain. Set it to TSK_URL_DECODED 2014-11-17 15:58:22 -05:00
Karl Mortensen
fa8a3597b2 Fix report generation to include more artifacts and attributes 2014-11-17 15:39:22 -05:00
Richard Cordovano
caff69063d Make sure the correct reg ripper copy is run by the recent activity module 2014-11-07 17:44:38 -05:00
Richard Cordovano
2562cd684e Fix typos in recent activity module 2014-11-06 22:04:23 -05:00
Richard Cordovano
cb01eb40cd Make recent activity module cancellable 2014-11-06 21:14:26 -05:00
esaunders
6b7380f2d0 Replace NUL bytes in RegRipper output with spaces. If we don't do this the XML parser will fail. 2014-11-05 16:55:29 -05:00
Eamonn Saunders
780d40971d - Modified ExtractRegistry.java to attach Windows version info to TSK_OS_INFO artifact instead of TSK_INSTALLED_PROGRAM.
- Added new icon for "Operating System Information" to UI and Report.
- Added TSK_OS_INFO artifact to report.
2014-10-15 16:31:12 -04:00
Eamonn Saunders
d276f54077 Added a new RegRipper plugin to determine processor architecture and modified ExtractRegistry.java to create a new TSK_OS_INFO artifact with a single TSK_PROCESSOR_ARCHITECTURE attribute. 2014-10-14 13:18:12 -04:00
Brian Carrier
5e4ed7d047 refactored search engine, used list to make it more deterministic 2014-08-19 10:37:12 -07:00
Brian Carrier
e5230e5a79 Reduce database round trips in registry parsing code 2014-07-28 13:52:38 -04:00
Brian Carrier
e5026a108b Changed uses of Java loggger to Autopsy logger 2014-07-10 17:13:40 -04:00
Brian Carrier
85548bd89b Updated version numbers for 3.1.0 2014-07-09 12:10:09 -04:00
Nick Davis
2a2b8ba847 Re-added newlines to strings in properties files. 2014-07-02 21:10:39 -04:00
Richard Cordovano
9be692953c Merge pull request #800 from sleuthkit/db_threading
Fix error message format error
2014-06-24 16:02:48 -04:00
Richard Cordovano
7a0bb1e22b Fix error message format error 2014-06-24 16:00:50 -04:00
Brian Carrier
4b5ce43726 Merge branch 'develop' of github.com:sleuthkit/autopsy into develop 2014-06-23 13:47:55 -04:00
Brian Carrier
ce69ad93fa Ensure USB make is in proper place even if initial entries don't specify it 2014-06-16 14:57:20 -04:00
Kay Bassi
062e8c3d75 Translation completed. 2014-06-13 12:52:53 -07:00
Nick Davis
97ba007fbb Extracted newly added string to bundle.
Fixed spelling.
2014-06-13 13:45:06 -04:00
Brian Carrier
f12ec3da88 fixed #742 to use webkit format time in Chrome instead of PRTime format 2014-06-12 21:33:15 -04:00
Brian Carrier
f91c53fe3e Merge branch 'develop' of github.com:sleuthkit/autopsy into develop 2014-06-06 11:14:24 -04:00
Brian Carrier
1924ff4750 stop executils when it is not needed anymore. Remove stop method from recent activity since it is no longer needed. 2014-06-06 11:14:15 -04:00
Brian Carrier
26e01a6cb0 Merge branch 'develop' of github.com:sleuthkit/autopsy into develop 2014-06-05 23:24:03 -04:00
Brian Carrier
bd2f97da4c Allow DS modules to supply sub-title of progress bar and updated RecentActivity to use it 2014-06-05 23:23:54 -04:00
Brian Carrier
1d3b1dab67 USB device parser adds vendor name when product code isn't known 2014-05-30 00:20:51 -04:00
Richard Cordovano
99fd68b1c5 Change data source ingest behavior 2014-05-15 15:39:42 -04:00
Richard Cordovano
33439ecb43 Merge pull request #681 from mrtizmo/recentactivity-ja
RecentActivity additional Japanese translations
2014-04-23 10:34:44 -04:00
Kay Bassi
c508b6af5f Translation complete. Checked for inconsistencies. 2014-04-22 17:18:22 -04:00
Nick Davis
cb8057e66a Pulled new static string. 2014-04-22 17:06:49 -04:00
Nick Davis
85083eeaac RecentActivity - Added NON-NLS tags to hardcoded strings not needing National Language Support. 2014-04-22 15:52:40 -04:00
Nick Davis
6c5ffc8e3b Removed unused strings from Bundle. 2014-04-15 17:48:30 -04:00
Nick Davis
de73225c13 Pulled strings into Bundle.
Translated strings.
2014-04-15 17:36:32 -04:00
Richard Cordovano
5d4f5f1636 Corrected log message format errors in recent activity extracter ingest module 2014-04-10 17:27:35 -04:00
Richard Cordovano
708dd975df Fixed incorrect auto-format of Firefox(Extracter) log messages 2014-04-10 17:19:56 -04:00
Richard Cordovano
1431d12a90 Eliminated duplication of ingest job cancellation check methods 2014-04-10 17:10:08 -04:00
Richard Cordovano
e8773786f4 Added overwrite flag to PlatformUtil resource file extraction method, use for pipeline config 2014-04-10 12:58:45 -04:00
Brian Carrier
4206ab4a10 Fixed device ID lookup error, updated device mapping file, renamed class 2014-04-07 16:06:46 -04:00
Samuel H. Kenyon
109cd14c98 Remove messageID tracking and passing from modules as class IngestMessage handles it automatically now 2014-04-03 22:49:17 -04:00
Brian Carrier
3abbc64ec9 added more checks to RR plug-ins to not display path of module when key is not found 2014-04-03 15:10:39 -04:00
Richard Cordovano
4f8617a16a Tidied up ingest framework API 2014-03-26 17:12:24 -04:00
Richard Cordovano
7c2282e832 Renamed ingest job settings classes 2014-03-25 09:47:46 -04:00
Richard Cordovano
87bb0211f2 Merged in develop branch as of March 24, 2014 2014-03-24 12:35:48 -04:00